Error: rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
File:                     8BCC3BCD747996DEA6D7F16098CF132148801B30.mft (raw, json)
Hash identifier:          E6iiD5T/SZY3Yh2GLrgav17a6ZDpT6BQqRCn0lrPCkU=
Subject key identifier:   56:B8:31:6A:E4:D6:F7:B0:F6:1C:97:F0:4C:4D:0C:4C:D0:7E:19:25
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       55A4B2E4146CF8F5CDD0E59425D1F0CA04AAF06F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
Manifest number:          0471
Signing time:             Sun 23 Aug 2026 19:36:13 +0000
Manifest this update:     Sun 23 Aug 2026 19:31:13 +0000
Manifest next update:     Mon 24 Aug 2026 20:35:13 +0000
Files and hashes:         1: 3134332e3133372e3132302e302f32332d3233203d3e20323634303336.roa (hash: owTkq/dG66tkrIfuPiJQBxtXgfk+qI4oY2Sn3oM2l/M=)
                          2: 323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa (hash: bMZRiDJZfvpXMvyNKZOy/m32iuSPLcGIg7ky+Zs70wI=)
                          3: 3134332e3133372e3132302e302f32342d3234203d3e20323634303336.roa (hash: s7z7SvnHcVozoSgFXwD0FHgTOJNiIhEz3pePLOWjkWk=)
                          4: 323830343a323964303a3a2f33322d3332203d3e20323634303336.roa (hash: BKFcpL00CxX1BCnbGZSrJcLyTukRqD2fn9qKzIvXWSU=)
                          5: 323830343a323964303a3a2f33332d3333203d3e20323634303336.roa (hash: wWbxHfvF9GnidGTEqyu+J2EKuLdU6+0ggtFCS5wDyIc=)
                          6: 3134332e3133372e3132322e302f32332d3233203d3e20323634303336.roa (hash: blAp0YszNOlKlnnI58ugDdP6wPEBBbVFUnz/yNWC2zs=)
                          7: 3134332e3133372e3132322e302f32342d3234203d3e20323634303336.roa (hash: A99F9sZJFNXogJTy6mEN1rFOKrnPMvciVClV5WDGGyU=)
                          8: 3134332e3133372e3132312e302f32342d3234203d3e20323634303336.roa (hash: MI4UFZGyNsjavqYl+eTK/xpDQ+zhOd5RlJmVDst5vi8=)
                          9: 3134332e3133372e3132332e302f32342d3234203d3e20323634303336.roa (hash: Fw4Gxp3JFNbSYCgnV4fI3fLGqx7UuheLZCetQmFrYzg=)
                          10: 3134332e3133372e3132302e302f32322d3232203d3e20323634303336.roa (hash: QVXYoR78SCXxvPXakkjRveS0Z77X2cWvA6eEGKST6ls=)
                          11: 8BCC3BCD747996DEA6D7F16098CF132148801B30.crl (hash: 1zg1vBJtY77Vju9bWwksoPhBVevaHWGsPEdaxYYn69A=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:b2:e4:14:6c:f8:f5:cd:d0:e5:94:25:d1:f0:ca:04:aa:f0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Aug 23 19:31:13 2026 GMT
            Not After : Aug 24 20:35:13 2026 GMT
        Subject: CN=56B8316AE4D6F7B0F61C97F04C4D0C4CD07E1925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:58:5e:de:fa:31:d5:15:f5:66:72:d6:84:
                    76:fe:77:90:9b:a5:91:e7:37:b1:7a:b5:2e:43:81:
                    2d:e0:41:f5:63:81:e4:48:12:de:41:e9:d9:f8:9b:
                    7f:5d:eb:3e:27:ec:db:50:a9:51:fc:fb:7f:6b:67:
                    95:17:e9:1b:f4:61:10:48:36:3b:64:df:68:04:35:
                    78:81:a3:46:79:67:5a:5e:e9:08:70:51:68:4e:04:
                    13:30:c4:52:c2:21:fa:ed:82:ce:94:20:8c:32:33:
                    85:30:2a:c0:08:80:9c:fe:31:36:09:07:fd:3e:fd:
                    59:02:00:6a:a9:fa:8f:e5:74:64:0d:d5:6e:74:96:
                    30:a4:5a:2b:32:27:77:7b:e8:14:b9:c7:9a:b6:54:
                    7e:a7:20:ba:39:9e:bd:47:2c:52:dc:1a:07:c7:25:
                    d6:fb:5e:d5:f0:8f:f1:14:7a:91:19:d4:82:a1:66:
                    06:41:a0:38:9d:38:ac:08:f1:11:ac:3c:95:73:7c:
                    e4:02:40:a6:09:e9:b2:39:04:f0:73:a3:87:39:d1:
                    d2:25:69:35:7d:9e:57:0a:6f:f8:3a:f5:7b:28:50:
                    d6:a3:d1:9f:eb:88:09:0b:d7:45:50:d3:3c:bd:ab:
                    0f:24:4d:54:52:da:69:4c:e1:ec:4c:4b:7b:6e:90:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B8:31:6A:E4:D6:F7:B0:F6:1C:97:F0:4C:4D:0C:4C:D0:7E:19:25
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5d:14:67:96:95:de:e2:c1:32:07:70:0e:a6:ab:a3:81:d5:
         7a:71:32:52:64:e5:be:5b:75:93:0a:47:4e:c7:b2:83:1e:3e:
         e5:ab:92:ba:99:c1:22:7f:c7:6c:2e:98:b6:11:9a:a6:51:f0:
         9f:df:2f:e1:21:58:23:53:79:90:f4:94:4c:8c:7b:f5:75:c0:
         ad:5a:ec:c6:89:ed:8e:1c:d5:96:94:53:1d:72:6d:19:f5:52:
         ba:b8:e6:97:08:cd:e4:40:d7:a4:99:9c:47:ae:b4:5e:56:24:
         be:ef:0e:b7:b2:ca:b5:aa:61:49:9b:0a:b0:63:79:d2:04:6b:
         93:25:5d:b8:7c:e2:7f:f3:e9:10:86:ec:78:18:c6:ab:3b:07:
         49:64:be:c0:ba:25:e1:90:d4:e4:c2:33:c8:bd:99:f2:b7:52:
         b9:58:d2:26:a0:00:60:57:48:0f:6e:e5:19:e4:84:fc:56:9f:
         9a:a7:09:f7:37:aa:dc:bd:7c:89:da:d5:df:9e:d5:bb:ab:58:
         6c:5a:73:3a:16:01:ef:52:04:08:50:1a:0e:6e:15:1b:9d:cf:
         61:aa:ea:8f:7e:3b:01:7c:78:c2:48:4f:1f:d7:17:c6:bb:20:
         58:0b:5d:6e:d7:73:5a:38:5e:a4:07:f3:e7:de:70:89:9c:86:
         0c:6b:94:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:11:51 2026 by rpki-client